From 30b1287df5d2dc23b797a578e4916199715754ef Mon Sep 17 00:00:00 2001
From: "Yukihiro \"Matz\" Matsumoto" <matz@ruby.or.jp>
Date: Fri, 26 Feb 2021 22:16:07 +0900
Subject: state.c: check irep reference count overflow.

---
 src/state.c | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/state.c')

diff --git a/src/state.c b/src/state.c
index 83cbf1629..d3be618f1 100644
--- a/src/state.c
+++ b/src/state.c
@@ -4,6 +4,7 @@
 ** See Copyright Notice in mruby.h
 */
 
+#include <stdint.h>
 #include <stdlib.h>
 #include <string.h>
 #include <mruby.h>
@@ -110,6 +111,12 @@ void
 mrb_irep_incref(mrb_state *mrb, mrb_irep *irep)
 {
   if (irep->flags & MRB_IREP_NO_FREE) return;
+  if (irep->refcnt == UINT16_MAX) {
+    mrb_garbage_collect(mrb);
+    if (irep->refcnt == UINT16_MAX) {
+      mrb_raise(mrb, E_RUNTIME_ERROR, "too many irep references");
+    }
+  }
   irep->refcnt++;
 }
 
-- 
cgit v1.2.3